Repository navigation
chore(deps): bump github.com/open-policy-agent/opa from 1.21.1 to 1.21.4 - #77
dependabot[bot] wants to merge 1 commit into
Security Analysis Passed
No security issues found
Details
Kusari Analysis Results:
✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.
Both analyses recommend proceeding. The dependency update moves opa from 1.21.1 to 1.21.4 (permissive licenses, well maintained) and golang.org/x/crypto from 0.55.0 to 0.57.0. The crypto bump remediates two ssh DoS advisories, GO-2026-6354 (CVE-2026-78662) and GO-2026-6355 (CVE-2026-56855). GO-2026-5932 (the unmaintained openpgp package) is carried over from the previous version and has no available fix, so this PR neither introduced it nor can resolve it. No new advisories are introduced. The code analysis found no code issues, exposed secrets, or workflow issues. The combined risk profile is improved, not worsened. Newer versions exist (opa v1.22.0, crypto v0.58.0), but this is informational only.
Note
View full detailed analysis result for more information on the output and the checks that were run.
@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: 9c074d7, performed at: 2026-11-01T05:55:48Z